[dh.c]
Prevent sshd from sending DH groups with a primitive generator of zero or
one, even if they are listed in /etc/moduli. ok markus@
- djm@cvs.openbsd.org 2004/02/25 00:22:45
[sshd.c]
typo in comment
+ - dtucker@cvs.openbsd.org 2004/02/27 22:42:47
+ [dh.c]
+ Prevent sshd from sending DH groups with a primitive generator of zero or
+ one, even if they are listed in /etc/moduli. ok markus@
20040226
- (bal) KNF our sshlogin.c even if the code looks nothing like upstream
*/
#include "includes.h"
-RCSID("$OpenBSD: dh.c,v 1.26 2003/12/16 15:51:54 markus Exp $");
+RCSID("$OpenBSD: dh.c,v 1.27 2004/02/27 22:42:47 dtucker Exp $");
#include "xmalloc.h"
if (BN_num_bits(dhg->p) != dhg->size)
goto failclean;
+ if (BN_is_zero(dhg->g) || BN_is_one(dhg->g))
+ goto failclean;
+
return (1);
failclean: